Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
File: 6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft (raw, json)
Hash identifier: olPlIPUwZalZb3wsJAUt8ez8etIzHV6F6qm2wKe22Fo=
Subject key identifier: A1:31:58:04:27:BB:68:F2:6B:54:04:7F:33:BB:E1:81:C0:F2:25:8A
Authority key identifier: EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB
Certificate issuer: /CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb
Certificate serial: 019A2FA01BCCF0D0C378FE54C9B4CBC22938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
Manifest number: 0BB5
Signing time: Wed 29 Oct 2025 11:00:13 +0000
Manifest this update: Wed 29 Oct 2025 11:00:13 +0000
Manifest next update: Thu 30 Oct 2025 11:00:13 +0000
Files and hashes: 1: 6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl (hash: BMltZENO9Yuv01t/2GcKnHPuJzELkfHTRv9qnT/jPnQ=)
2: LdRBYy0Dc5TAEL5DjhgBeOrbOd4.roa (hash: DqAe52Zea4wwRHNsVvBEFGj53/XE1pCKy+2JNBHlZFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:a0:1b:cc:f0:d0:c3:78:fe:54:c9:b4:cb:c2:29:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb
Validity
Not Before: Oct 29 11:00:13 2025 GMT
Not After : Oct 30 11:00:13 2025 GMT
Subject: CN=a131580427bb68f26b54047f33bbe181c0f2258a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f6:58:dc:af:3c:43:76:8a:33:9b:8f:01:6f:
b8:45:07:73:ef:61:3d:9f:37:7b:a0:b2:dd:c8:a7:
d1:a0:65:bc:94:fc:7a:1b:78:c3:5d:90:8f:5c:91:
55:77:bc:e1:03:02:4b:c0:fd:c9:f8:96:9c:48:96:
51:d5:9f:4f:9c:b6:b7:a9:49:cf:2c:e0:d3:71:43:
05:27:4c:ee:b1:5b:a6:70:7e:6f:c9:65:cc:89:1d:
39:57:2a:d1:e1:39:b3:67:b3:5d:b1:54:8f:fa:e8:
e5:d8:a9:34:9a:3a:0b:27:3e:b4:11:ee:37:4c:ea:
6b:1f:f4:7f:74:32:83:78:9a:ce:3e:c9:e2:d2:cc:
f7:21:f3:6a:21:b0:79:45:fb:4e:63:04:38:d8:c1:
23:e2:a7:fd:0d:59:29:5a:2e:6f:86:02:05:20:d8:
06:fe:85:9c:cc:6b:06:dc:e5:ec:cf:50:ad:25:bf:
28:f3:fb:a6:67:5f:81:dd:0d:f5:2e:68:fe:a2:0d:
b9:13:64:07:84:a3:f4:eb:31:7e:0b:8a:0a:a1:ec:
d0:db:06:92:6f:7e:69:11:ae:ae:c3:1b:d3:16:a9:
74:26:7a:a4:82:e1:53:60:28:99:c8:48:90:a5:de:
b4:14:33:2b:1b:e9:31:5d:7b:c7:e2:85:61:b8:7e:
4c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:31:58:04:27:BB:68:F2:6B:54:04:7F:33:BB:E1:81:C0:F2:25:8A
X509v3 Authority Key Identifier:
keyid:EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d8:00:1c:a0:8a:93:f3:df:72:9c:1a:e4:68:e8:1a:ea:1c:
98:10:a1:d9:f9:9a:7e:6b:31:50:3f:8f:f0:15:08:53:c9:a3:
a3:8b:e9:66:bc:41:ca:72:ad:7e:67:28:b8:bb:d0:0c:b6:c9:
17:20:43:34:47:1f:a3:d9:a1:cf:f7:55:3a:a3:ab:94:58:a2:
51:2b:2e:34:44:c7:62:ef:90:98:e0:51:61:1e:2a:bb:31:21:
d4:2b:7f:6c:f6:0d:0c:d0:99:bb:86:33:05:3a:64:af:27:f0:
5b:0e:e4:1e:00:2d:67:8b:ae:e3:18:30:ab:06:a1:eb:8f:ac:
32:95:06:a7:29:31:48:26:af:20:48:a4:cc:22:e7:98:56:45:
99:27:a4:8b:15:a2:15:a5:04:28:b2:88:43:05:57:04:c7:01:
fe:77:b5:82:bf:ab:74:11:3d:04:ba:09:c6:d2:cc:29:f7:f8:
94:2a:82:54:8c:c3:be:8e:0e:cf:34:e7:1c:2e:97:42:d1:68:
48:ba:02:bd:16:77:d2:f4:30:88:c9:35:9d:41:40:35:c6:2d:
c9:43:ca:bb:8d:d0:ea:09:1d:8a:37:f4:2c:4e:70:ba:9b:6f:
4b:45:06:11:3b:7e:05:55:54:e0:9a:d7:1f:26:a6:0d:ea:95:
12:82:b6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 21:03:35 2025 by rpki-client